[Wed Nov 12 10:47:33.867765 2025] [:error] [pid 60180:tid 60186] [client 64.227.32.66:46820] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/v2/api-docs"] [unique_id "aRP1RVhgd7ccS8EZg1qo8gAAAUQ"]
[Wed Nov 12 10:47:34.788001 2025] [:error] [pid 60096:tid 60148] [client 64.227.32.66:46832] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/v3/api-docs"] [unique_id "aRP1RjmzkhCvvk8DXOwWEAAAAJI"]
[Wed Nov 12 10:47:35.534226 2025] [:error] [pid 60405:tid 60417] [client 64.227.32.66:44228] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/api-docs/swagger.json"] [unique_id "aRP1R3MGv_mlVi6mf5pakwAAAAk"]
[Wed Nov 12 10:47:36.273717 2025] [:error] [pid 60097:tid 60176] [client 64.227.32.66:44234] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/api/swagger.json"] [unique_id "aRP1SMdT5oio_TbWpi_rCgAAANc"]
[Wed Nov 12 10:47:37.014716 2025] [:error] [pid 60180:tid 60200] [client 64.227.32.66:44236] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.mobi-mixx.com"] [uri "/@vite/env"] [unique_id "aRP1SVhgd7ccS8EZg1qo-AAAAVI"]
[Wed Nov 12 10:47:37.751251 2025] [:error] [pid 60405:tid 60422] [client 64.227.32.66:44240] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.mobi-mixx.com"] [uri "/actuator/env"] [unique_id "aRP1SXMGv_mlVi6mf5pamAAAAA4"]
[Wed Nov 12 10:47:38.479625 2025] [:error] [pid 60097:tid 60172] [client 64.227.32.66:44246] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.mobi-mixx.com"] [uri "/server"] [unique_id "aRP1SsdT5oio_TbWpi_rEwAAANM"]
[Wed Nov 12 10:47:39.206615 2025] [:error] [pid 60096:tid 60141] [client 64.227.32.66:44256] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.mobi-mixx.com"] [uri "/.vscode/sftp.json"] [unique_id "aRP1SzmzkhCvvk8DXOwWEwAAAI4"]
[Wed Nov 12 10:47:39.932478 2025] [:error] [pid 60097:tid 60170] [client 64.227.32.66:44260] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.mobi-mixx.com"] [uri "/about"] [unique_id "aRP1S8dT5oio_TbWpi_rGAAAANE"]
[Wed Nov 12 10:47:40.662457 2025] [:error] [pid 60095:tid 60116] [client 64.227.32.66:44276] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.mobi-mixx.com"] [uri "/debug/default/view"] [unique_id "aRP1THlw2elroagFF1qvVAAAAFE"]
[Wed Nov 12 10:47:41.415879 2025] [:error] [pid 60180:tid 60188] [client 64.227.32.66:44292] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.mobi-mixx.com"] [uri "/v2/_catalog"] [unique_id "aRP1TVhgd7ccS8EZg1qpAAAAAUY"]
[Wed Nov 12 10:47:42.145844 2025] [:error] [pid 60096:tid 60145] [client 64.227.32.66:44304] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.mobi-mixx.com"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aRP1TjmzkhCvvk8DXOwWGgAAAJA"]
[Wed Nov 12 10:47:42.873131 2025] [:error] [pid 60097:tid 60147] [client 64.227.32.66:44316] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.mobi-mixx.com"] [uri "/server-status"] [unique_id "aRP1TsdT5oio_TbWpi_rGgAAAMI"]
[Wed Nov 12 10:47:43.604787 2025] [:error] [pid 12744:tid 12751] [client 64.227.32.66:44330] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.mobi-mixx.com"] [uri "/login.action"] [unique_id "aRP1T51cp_ouUvkFj0WDPQAAAQM"]
[Wed Nov 12 10:47:44.381393 2025] [:error] [pid 60095:tid 60117] [client 64.227.32.66:44340] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/_all_dbs"] [unique_id "aRP1UHlw2elroagFF1qvWQAAAFI"]
[Wed Nov 12 10:47:45.110993 2025] [:error] [pid 60097:tid 60162] [client 64.227.32.66:44356] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.mobi-mixx.com"] [uri "/.DS_Store"] [unique_id "aRP1UcdT5oio_TbWpi_rIwAAAMk"]
[Wed Nov 12 10:47:45.834256 2025] [:error] [pid 60096:tid 60153] [client 64.227.32.66:52916] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mobi-mixx.com"] [uri "/.env"] [unique_id "aRP1UTmzkhCvvk8DXOwWIQAAAJQ"]
[Wed Nov 12 10:47:46.559703 2025] [:error] [pid 60097:tid 60171] [client 64.227.32.66:52926] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mobi-mixx.com"] [uri "/.git/config"] [unique_id "aRP1UsdT5oio_TbWpi_rJwAAANI"]
[Wed Nov 12 10:47:47.303978 2025] [:error] [pid 60096:tid 60134] [client 64.227.32.66:52928] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.mobi-mixx.com"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aRP1UzmzkhCvvk8DXOwWIwAAAIg"]
[Wed Nov 12 10:47:48.121557 2025] [:error] [pid 60095:tid 60099] [client 64.227.32.66:52932] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.mobi-mixx.com"] [uri "/config.json"] [unique_id "aRP1VHlw2elroagFF1qvXQAAAEA"]
[Wed Nov 12 10:47:48.864557 2025] [:error] [pid 60097:tid 60164] [client 64.227.32.66:52934] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.mobi-mixx.com"] [uri "/telescope/requests"] [unique_id "aRP1VMdT5oio_TbWpi_rMAAAAMs"]
[Wed Nov 12 10:47:49.587803 2025] [:error] [pid 60096:tid 60131] [client 64.227.32.66:52940] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.mobi-mixx.com"] [uri "/info.php"] [unique_id "aRP1VTmzkhCvvk8DXOwWJAAAAIU"]
[Wed Nov 12 10:47:50.386909 2025] [:error] [pid 60097:tid 60150] [client 64.227.32.66:52950] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.mobi-mixx.com"] [uri "/"] [unique_id "aRP1VsdT5oio_TbWpi_rNAAAAMQ"]
[Fri Nov 14 10:05:20.430171 2025] [:error] [pid 47242:tid 47261] [client 134.209.25.199:35098] [client 134.209.25.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/v2/api-docs"] [unique_id "aRaOYFPNnvrux3OMagzlhwAAANA"]
[Fri Nov 14 10:05:21.170562 2025] [:error] [pid 47155:tid 47199] [client 134.209.25.199:35116] [client 134.209.25.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/v3/api-docs"] [unique_id "aRaOYZipxRXMZJH8hmhJIQAAAE0"]
[Fri Nov 14 10:05:21.996337 2025] [:error] [pid 47155:tid 47186] [client 134.209.25.199:35134] [client 134.209.25.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/api-docs/swagger.json"] [unique_id "aRaOYZipxRXMZJH8hmhJJAAAAEA"]
[Fri Nov 14 10:05:22.731111 2025] [:error] [pid 47630:tid 47642] [client 134.209.25.199:35160] [client 134.209.25.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/api/swagger.json"] [unique_id "aRaOYsxXXNBfWgpfVJ6SnwAAAQo"]
[Fri Nov 14 10:05:23.460936 2025] [:error] [pid 47154:tid 47181] [client 134.209.25.199:35172] [client 134.209.25.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/@vite/env"] [unique_id "aRaOY0ijA13A3g3ATrLDAQAAABY"]
[Fri Nov 14 10:05:24.199499 2025] [:error] [pid 47154:tid 47161] [client 134.209.25.199:35192] [client 134.209.25.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/actuator/env"] [unique_id "aRaOZEijA13A3g3ATrLDAgAAAAI"]
[Fri Nov 14 10:05:24.926683 2025] [:error] [pid 47154:tid 47159] [client 134.209.25.199:35208] [client 134.209.25.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/server"] [unique_id "aRaOZEijA13A3g3ATrLDBQAAAAA"]
[Fri Nov 14 10:05:25.659752 2025] [:error] [pid 47156:tid 47225] [client 134.209.25.199:35222] [client 134.209.25.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/.vscode/sftp.json"] [unique_id "aRaOZdjrQX_P-kC7M_5tQgAAAIs"]
[Fri Nov 14 10:05:26.388056 2025] [:error] [pid 47156:tid 47221] [client 134.209.25.199:35240] [client 134.209.25.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/about"] [unique_id "aRaOZtjrQX_P-kC7M_5tRAAAAIc"]
[Fri Nov 14 10:05:27.121249 2025] [:error] [pid 47155:tid 47204] [client 134.209.25.199:35256] [client 134.209.25.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/debug/default/view"] [unique_id "aRaOZ5ipxRXMZJH8hmhJLAAAAFI"]
[Fri Nov 14 10:05:27.849675 2025] [:error] [pid 47242:tid 47268] [client 134.209.25.199:41644] [client 134.209.25.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/v2/_catalog"] [unique_id "aRaOZ1PNnvrux3OMagzlkwAAANc"]
[Fri Nov 14 10:05:28.578231 2025] [:error] [pid 47156:tid 47215] [client 134.209.25.199:41666] [client 134.209.25.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aRaOaNjrQX_P-kC7M_5tRgAAAIE"]
[Fri Nov 14 10:05:29.311182 2025] [:error] [pid 47155:tid 47210] [client 134.209.25.199:41684] [client 134.209.25.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/server-status"] [unique_id "aRaOaZipxRXMZJH8hmhJMwAAAFg"]
[Fri Nov 14 10:05:30.042659 2025] [:error] [pid 47630:tid 47656] [client 134.209.25.199:41716] [client 134.209.25.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/login.action"] [unique_id "aRaOasxXXNBfWgpfVJ6SqgAAARg"]
[Fri Nov 14 10:05:30.770073 2025] [:error] [pid 47156:tid 47237] [client 134.209.25.199:41724] [client 134.209.25.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/_all_dbs"] [unique_id "aRaOatjrQX_P-kC7M_5tSQAAAJY"]
[Fri Nov 14 10:05:31.504303 2025] [:error] [pid 47630:tid 47652] [client 134.209.25.199:41728] [client 134.209.25.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/.DS_Store"] [unique_id "aRaOa8xXXNBfWgpfVJ6SqwAAARQ"]
[Fri Nov 14 10:05:32.237502 2025] [:error] [pid 47242:tid 47269] [client 134.209.25.199:41742] [client 134.209.25.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mobi-mixx.com"] [uri "/.env"] [unique_id "aRaObFPNnvrux3OMagzlnQAAANg"]
[Fri Nov 14 10:05:32.966046 2025] [:error] [pid 47630:tid 47638] [client 134.209.25.199:41758] [client 134.209.25.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mobi-mixx.com"] [uri "/.git/config"] [unique_id "aRaObMxXXNBfWgpfVJ6StQAAAQY"]
[Fri Nov 14 10:05:33.695085 2025] [:error] [pid 59105:tid 59111] [client 134.209.25.199:41768] [client 134.209.25.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aRaObbd-anP1JpNfuSLRnwAAAUQ"]
[Fri Nov 14 10:05:34.431740 2025] [:error] [pid 59105:tid 59110] [client 134.209.25.199:41774] [client 134.209.25.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/config.json"] [unique_id "aRaObrd-anP1JpNfuSLRoQAAAUM"]
[Fri Nov 14 10:05:35.159369 2025] [:error] [pid 59105:tid 59124] [client 134.209.25.199:41788] [client 134.209.25.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/telescope/requests"] [unique_id "aRaOb7d-anP1JpNfuSLRpAAAAVE"]
[Fri Nov 14 10:05:35.965783 2025] [:error] [pid 47630:tid 47637] [client 134.209.25.199:41800] [client 134.209.25.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/info.php"] [unique_id "aRaOb8xXXNBfWgpfVJ6SxAAAAQU"]
[Fri Nov 14 10:05:36.795732 2025] [:error] [pid 47630:tid 47632] [client 134.209.25.199:41812] [client 134.209.25.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/"] [unique_id "aRaOcMxXXNBfWgpfVJ6SyAAAAQA"]
[Fri Nov 14 10:32:58.862287 2025] [:error] [pid 59105:tid 59118] [client 167.99.181.249:59456] [client 167.99.181.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/v2/api-docs"] [unique_id "aRaU2rd-anP1JpNfuSLeIwAAAUs"]
[Fri Nov 14 10:32:59.479946 2025] [:error] [pid 47156:tid 47228] [client 167.99.181.249:59458] [client 167.99.181.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/v3/api-docs"] [unique_id "aRaU29jrQX_P-kC7M_58OQAAAI4"]
[Fri Nov 14 10:33:00.097775 2025] [:error] [pid 47154:tid 47177] [client 167.99.181.249:59460] [client 167.99.181.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/api-docs/swagger.json"] [unique_id "aRaU3EijA13A3g3ATrLONQAAABI"]
[Fri Nov 14 10:33:00.713870 2025] [:error] [pid 47242:tid 47247] [client 167.99.181.249:59462] [client 167.99.181.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/api/swagger.json"] [unique_id "aRaU3FPNnvrux3OMagzxggAAAMI"]
[Fri Nov 14 10:33:01.332324 2025] [:error] [pid 47154:tid 47183] [client 167.99.181.249:59468] [client 167.99.181.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/@vite/env"] [unique_id "aRaU3UijA13A3g3ATrLOOgAAABg"]
[Fri Nov 14 10:33:01.949949 2025] [:error] [pid 47154:tid 47161] [client 167.99.181.249:59474] [client 167.99.181.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/actuator/env"] [unique_id "aRaU3UijA13A3g3ATrLOPAAAAAI"]
[Fri Nov 14 10:33:02.565527 2025] [:error] [pid 47156:tid 47234] [client 167.99.181.249:59480] [client 167.99.181.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/server"] [unique_id "aRaU3tjrQX_P-kC7M_58QQAAAJQ"]
[Fri Nov 14 10:33:03.191239 2025] [:error] [pid 47242:tid 47252] [client 167.99.181.249:59482] [client 167.99.181.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/.vscode/sftp.json"] [unique_id "aRaU31PNnvrux3OMagzxhgAAAMc"]
[Fri Nov 14 10:33:03.907617 2025] [:error] [pid 47630:tid 47635] [client 167.99.181.249:59484] [client 167.99.181.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/about"] [unique_id "aRaU38xXXNBfWgpfVJ6dXwAAAQM"]
[Fri Nov 14 10:33:04.633290 2025] [:error] [pid 47242:tid 47267] [client 167.99.181.249:59498] [client 167.99.181.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/debug/default/view"] [unique_id "aRaU4FPNnvrux3OMagzxjAAAANY"]
[Fri Nov 14 10:33:05.250064 2025] [:error] [pid 47155:tid 47196] [client 167.99.181.249:59514] [client 167.99.181.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/v2/_catalog"] [unique_id "aRaU4ZipxRXMZJH8hmhUGAAAAEo"]
[Fri Nov 14 10:33:05.872149 2025] [:error] [pid 47630:tid 47634] [client 167.99.181.249:59530] [client 167.99.181.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aRaU4cxXXNBfWgpfVJ6dYgAAAQI"]
[Fri Nov 14 10:33:06.489340 2025] [:error] [pid 47242:tid 47269] [client 167.99.181.249:59538] [client 167.99.181.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/server-status"] [unique_id "aRaU4lPNnvrux3OMagzxjQAAANg"]
[Fri Nov 14 10:33:07.113030 2025] [:error] [pid 47156:tid 47226] [client 167.99.181.249:59546] [client 167.99.181.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/login.action"] [unique_id "aRaU49jrQX_P-kC7M_58UQAAAIw"]
[Fri Nov 14 10:33:07.730336 2025] [:error] [pid 47154:tid 47178] [client 167.99.181.249:59554] [client 167.99.181.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/_all_dbs"] [unique_id "aRaU40ijA13A3g3ATrLOSAAAABM"]
[Fri Nov 14 10:33:08.347923 2025] [:error] [pid 47242:tid 47252] [client 167.99.181.249:49450] [client 167.99.181.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/.DS_Store"] [unique_id "aRaU5FPNnvrux3OMagzxkgAAAMc"]
[Fri Nov 14 10:33:08.964026 2025] [:error] [pid 59105:tid 59119] [client 167.99.181.249:49452] [client 167.99.181.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mobi-mixx.com"] [uri "/.env"] [unique_id "aRaU5Ld-anP1JpNfuSLeNwAAAUw"]
[Fri Nov 14 10:33:09.583651 2025] [:error] [pid 59105:tid 59122] [client 167.99.181.249:49466] [client 167.99.181.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mobi-mixx.com"] [uri "/.git/config"] [unique_id "aRaU5bd-anP1JpNfuSLeOgAAAU8"]
[Fri Nov 14 10:33:10.203267 2025] [:error] [pid 47630:tid 47655] [client 167.99.181.249:49482] [client 167.99.181.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aRaU5sxXXNBfWgpfVJ6daQAAARc"]
[Fri Nov 14 10:33:10.818962 2025] [:error] [pid 59105:tid 59126] [client 167.99.181.249:49490] [client 167.99.181.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/config.json"] [unique_id "aRaU5rd-anP1JpNfuSLeQAAAAVM"]
[Fri Nov 14 10:33:11.437002 2025] [:error] [pid 59105:tid 59127] [client 167.99.181.249:49506] [client 167.99.181.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/telescope/requests"] [unique_id "aRaU57d-anP1JpNfuSLeQwAAAVQ"]
[Fri Nov 14 10:33:12.056451 2025] [:error] [pid 47155:tid 47203] [client 167.99.181.249:49512] [client 167.99.181.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/info.php"] [unique_id "aRaU6JipxRXMZJH8hmhUJgAAAFE"]
[Fri Nov 14 10:33:12.672239 2025] [:error] [pid 47156:tid 47217] [client 167.99.181.249:49522] [client 167.99.181.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/"] [unique_id "aRaU6NjrQX_P-kC7M_58XwAAAIM"]
[Sun Nov 16 10:12:12.937677 2025] [:error] [pid 52563:tid 52588] [client 167.71.175.236:56890] [client 167.71.175.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/v2/api-docs"] [unique_id "aRky_M-l3ey-hVJ5Aus8fgAAANY"]
[Sun Nov 16 10:12:13.557993 2025] [:error] [pid 52470:tid 52527] [client 167.71.175.236:56894] [client 167.71.175.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/v3/api-docs"] [unique_id "aRky_Ug9mXF2ZFFtj1UJ4QAAAFY"]
[Sun Nov 16 10:12:14.185597 2025] [:error] [pid 52563:tid 52582] [client 167.71.175.236:56898] [client 167.71.175.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/api-docs/swagger.json"] [unique_id "aRky_s-l3ey-hVJ5Aus8ggAAANA"]
[Sun Nov 16 10:12:14.809854 2025] [:error] [pid 52563:tid 52570] [client 167.71.175.236:56908] [client 167.71.175.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/api/swagger.json"] [unique_id "aRky_s-l3ey-hVJ5Aus8gwAAAMQ"]
[Sun Nov 16 10:12:15.431438 2025] [:error] [pid 52471:tid 52543] [client 167.71.175.236:56920] [client 167.71.175.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/@vite/env"] [unique_id "aRky_9mWsFzjR5CEgDXlcwAAAIs"]
[Sun Nov 16 10:12:16.052971 2025] [:error] [pid 52563:tid 52573] [client 167.71.175.236:56924] [client 167.71.175.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/actuator/env"] [unique_id "aRkzAM-l3ey-hVJ5Aus8hAAAAMc"]
[Sun Nov 16 10:12:16.674260 2025] [:error] [pid 52469:tid 52481] [client 167.71.175.236:56930] [client 167.71.175.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/server"] [unique_id "aRkzAE6HaXpHeEZ98Z1EtQAAAAQ"]
[Sun Nov 16 10:12:17.295490 2025] [:error] [pid 52470:tid 52521] [client 167.71.175.236:56934] [client 167.71.175.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/.vscode/sftp.json"] [unique_id "aRkzAUg9mXF2ZFFtj1UJ5gAAAFA"]
[Sun Nov 16 10:12:17.915635 2025] [:error] [pid 52471:tid 52536] [client 167.71.175.236:56940] [client 167.71.175.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/about"] [unique_id "aRkzAdmWsFzjR5CEgDXleAAAAIQ"]
[Sun Nov 16 10:12:18.536325 2025] [:error] [pid 52563:tid 52585] [client 167.71.175.236:56946] [client 167.71.175.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/debug/default/view"] [unique_id "aRkzAs-l3ey-hVJ5Aus8igAAANM"]
[Sun Nov 16 10:12:19.156486 2025] [:error] [pid 52471:tid 52537] [client 167.71.175.236:57976] [client 167.71.175.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/v2/_catalog"] [unique_id "aRkzA9mWsFzjR5CEgDXlewAAAIU"]
[Sun Nov 16 10:12:19.777390 2025] [:error] [pid 52471:tid 52546] [client 167.71.175.236:57980] [client 167.71.175.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aRkzA9mWsFzjR5CEgDXlgAAAAI4"]
[Sun Nov 16 10:12:20.398506 2025] [:error] [pid 52563:tid 52589] [client 167.71.175.236:57996] [client 167.71.175.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/server-status"] [unique_id "aRkzBM-l3ey-hVJ5Aus8jAAAANc"]
[Sun Nov 16 10:12:21.019276 2025] [:error] [pid 52563:tid 52574] [client 167.71.175.236:58012] [client 167.71.175.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/login.action"] [unique_id "aRkzBc-l3ey-hVJ5Aus8jQAAAMg"]
[Sun Nov 16 10:12:21.639205 2025] [:error] [pid 52471:tid 52536] [client 167.71.175.236:58014] [client 167.71.175.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/_all_dbs"] [unique_id "aRkzBdmWsFzjR5CEgDXlhgAAAIQ"]
[Sun Nov 16 10:12:22.260851 2025] [:error] [pid 52563:tid 52569] [client 167.71.175.236:58016] [client 167.71.175.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/.DS_Store"] [unique_id "aRkzBs-l3ey-hVJ5Aus8jwAAAMM"]
[Sun Nov 16 10:12:22.880449 2025] [:error] [pid 52469:tid 52486] [client 167.71.175.236:58022] [client 167.71.175.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mobi-mixx.com"] [uri "/.env"] [unique_id "aRkzBk6HaXpHeEZ98Z1EuAAAAAk"]
[Sun Nov 16 10:12:23.506233 2025] [:error] [pid 52469:tid 52497] [client 167.71.175.236:58038] [client 167.71.175.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mobi-mixx.com"] [uri "/.git/config"] [unique_id "aRkzB06HaXpHeEZ98Z1EugAAABQ"]
[Sun Nov 16 10:12:24.126892 2025] [:error] [pid 52471:tid 52555] [client 167.71.175.236:58054] [client 167.71.175.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aRkzCNmWsFzjR5CEgDXljgAAAJc"]
[Sun Nov 16 10:12:24.747463 2025] [:error] [pid 52471:tid 52535] [client 167.71.175.236:58064] [client 167.71.175.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/config.json"] [unique_id "aRkzCNmWsFzjR5CEgDXljwAAAIM"]
[Sun Nov 16 10:12:25.369111 2025] [:error] [pid 52471:tid 52542] [client 167.71.175.236:58070] [client 167.71.175.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/telescope/requests"] [unique_id "aRkzCdmWsFzjR5CEgDXlkgAAAIo"]
[Sun Nov 16 10:12:25.989777 2025] [:error] [pid 52471:tid 52556] [client 167.71.175.236:58076] [client 167.71.175.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/info.php"] [unique_id "aRkzCdmWsFzjR5CEgDXlkwAAAJg"]
[Sun Nov 16 10:12:26.611402 2025] [:error] [pid 20556:tid 20578] [client 167.71.175.236:58086] [client 167.71.175.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/"] [unique_id "aRkzCkkbyEckbWtBcCLyJwAAARQ"]
[Thu Nov 20 14:38:00.722023 2025] [:error] [pid 55430:tid 55453] [client 209.97.180.8:52874] [client 209.97.180.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/v2/api-docs"] [unique_id "aR63SPPZXaIMEU4pE7vVjAAAANQ"]
[Thu Nov 20 14:38:01.981092 2025] [:error] [pid 40636:tid 40641] [client 209.97.180.8:52878] [client 209.97.180.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/v3/api-docs"] [unique_id "aR63SQK8BWUoW3xq0HDm8QAAA4E"]
[Thu Nov 20 14:38:03.428412 2025] [:error] [pid 34405:tid 34408] [client 209.97.180.8:52886] [client 209.97.180.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/api-docs/swagger.json"] [unique_id "aR63SzFpvu8oRK7ATfvs8AAAAQE"]
[Thu Nov 20 14:38:05.378961 2025] [:error] [pid 40537:tid 40559] [client 209.97.180.8:52912] [client 209.97.180.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/@vite/env"] [unique_id "aR63TaKlsL5kxTa3c1y91AAAAtI"]
[Thu Nov 20 14:38:06.384814 2025] [:error] [pid 55343:tid 55404] [client 209.97.180.8:52924] [client 209.97.180.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/actuator/env"] [unique_id "aR63TlWlO3EnyVMV7w6KgQAAAIU"]
[Thu Nov 20 14:38:07.303541 2025] [:error] [pid 40415:tid 40419] [client 209.97.180.8:52930] [client 209.97.180.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/server"] [unique_id "aR63T6hjIyLSv09svwNwzQAAAcE"]
[Thu Nov 20 14:38:08.799486 2025] [:error] [pid 55430:tid 55434] [client 209.97.180.8:48170] [client 209.97.180.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/.vscode/sftp.json"] [unique_id "aR63UPPZXaIMEU4pE7vVlAAAAME"]
[Thu Nov 20 14:38:09.658873 2025] [:error] [pid 55342:tid 55388] [client 209.97.180.8:48184] [client 209.97.180.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/about"] [unique_id "aR63Ubg6x32Tvk7fIG-txQAAAFA"]
[Thu Nov 20 14:38:10.524290 2025] [:error] [pid 40508:tid 40513] [client 209.97.180.8:48196] [client 209.97.180.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/debug/default/view"] [unique_id "aR63UqxXNVCMW_ksxPtS-AAAAoM"]
[Thu Nov 20 14:38:11.377052 2025] [:error] [pid 40636:tid 40644] [client 209.97.180.8:48212] [client 209.97.180.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/v2/_catalog"] [unique_id "aR63UwK8BWUoW3xq0HDm-AAAA4Q"]
[Thu Nov 20 14:38:12.115206 2025] [:error] [pid 55430:tid 55454] [client 209.97.180.8:48220] [client 209.97.180.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aR63VPPZXaIMEU4pE7vVlgAAANU"]
[Thu Nov 20 14:38:12.858382 2025] [:error] [pid 34405:tid 34431] [client 209.97.180.8:48236] [client 209.97.180.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/server-status"] [unique_id "aR63VDFpvu8oRK7ATfvtAAAAARg"]
[Thu Nov 20 14:38:13.899080 2025] [:error] [pid 55342:tid 55378] [client 209.97.180.8:48250] [client 209.97.180.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/login.action"] [unique_id "aR63Vbg6x32Tvk7fIG-t0wAAAEY"]
[Thu Nov 20 14:38:14.810098 2025] [:error] [pid 55342:tid 55394] [client 209.97.180.8:48260] [client 209.97.180.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/_all_dbs"] [unique_id "aR63Vrg6x32Tvk7fIG-t1AAAAFY"]
[Thu Nov 20 14:38:15.710749 2025] [:error] [pid 34405:tid 34421] [client 209.97.180.8:48272] [client 209.97.180.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/.DS_Store"] [unique_id "aR63VzFpvu8oRK7ATfvtIAAAAQ4"]
[Thu Nov 20 14:38:16.531669 2025] [:error] [pid 40415:tid 40430] [client 209.97.180.8:48280] [client 209.97.180.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mobi-mixx.com"] [uri "/.env"] [unique_id "aR63WKhjIyLSv09svwNw1AAAAcw"]
[Thu Nov 20 14:38:17.472916 2025] [:error] [pid 40636:tid 40662] [client 209.97.180.8:48294] [client 209.97.180.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mobi-mixx.com"] [uri "/.git/config"] [unique_id "aR63WQK8BWUoW3xq0HDnAgAAA5Y"]
[Thu Nov 20 14:38:18.349687 2025] [:error] [pid 40445:tid 40486] [client 209.97.180.8:58968] [client 209.97.180.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aR63WlH-MuFcoWRjXpYXAQAAAks"]
[Thu Nov 20 14:38:19.100649 2025] [:error] [pid 55342:tid 55379] [client 209.97.180.8:58984] [client 209.97.180.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/config.json"] [unique_id "aR63W7g6x32Tvk7fIG-t4wAAAEc"]
[Thu Nov 20 14:38:19.831209 2025] [:error] [pid 40537:tid 40565] [client 209.97.180.8:58994] [client 209.97.180.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/telescope/requests"] [unique_id "aR63W6KlsL5kxTa3c1y94AAAAtg"]
[Thu Nov 20 14:38:20.560949 2025] [:error] [pid 55340:tid 55348] [client 209.97.180.8:59006] [client 209.97.180.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/info.php"] [unique_id "aR63XPOxD-NeMydTybB0NAAAAAM"]
[Thu Nov 20 14:38:21.302863 2025] [:error] [pid 55340:tid 55358] [client 209.97.180.8:59018] [client 209.97.180.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/"] [unique_id "aR63XfOxD-NeMydTybB0NQAAAA0"]
[Sat Nov 22 13:07:16.178710 2025] [:error] [pid 53478:tid 53530] [client 167.71.81.114:49084] [client 167.71.81.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/v2/api-docs"] [unique_id "aSFFBAhUYdXBbQswAdSj9wAAAFU"]
[Sat Nov 22 13:07:16.798740 2025] [:error] [pid 53478:tid 53533] [client 167.71.81.114:49092] [client 167.71.81.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/v3/api-docs"] [unique_id "aSFFBAhUYdXBbQswAdSj-AAAAFg"]
[Sat Nov 22 13:07:17.422691 2025] [:error] [pid 53478:tid 53515] [client 167.71.81.114:49098] [client 167.71.81.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/api-docs/swagger.json"] [unique_id "aSFFBQhUYdXBbQswAdSj-wAAAEY"]
[Sat Nov 22 13:07:18.043909 2025] [:error] [pid 53477:tid 53495] [client 167.71.81.114:49100] [client 167.71.81.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/api/swagger.json"] [unique_id "aSFFBn7Lu30Ku9O40aJoGgAAAA4"]
[Sat Nov 22 13:07:18.666377 2025] [:error] [pid 53566:tid 53585] [client 167.71.81.114:36332] [client 167.71.81.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/@vite/env"] [unique_id "aSFFBsbSHDBkRbwMbd7YQwAAANE"]
[Sat Nov 22 13:07:19.287973 2025] [:error] [pid 9547:tid 9564] [client 167.71.81.114:36336] [client 167.71.81.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/actuator/env"] [unique_id "aSFFB9ClOR5qk7DoMeFEIgAAAUs"]
[Sat Nov 22 13:07:19.917065 2025] [:error] [pid 53477:tid 53493] [client 167.71.81.114:36352] [client 167.71.81.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/server"] [unique_id "aSFFB37Lu30Ku9O40aJoHAAAAAw"]
[Sat Nov 22 13:07:20.544829 2025] [:error] [pid 53477:tid 53502] [client 167.71.81.114:36368] [client 167.71.81.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/.vscode/sftp.json"] [unique_id "aSFFCH7Lu30Ku9O40aJoHwAAABU"]
[Sat Nov 22 13:07:21.203262 2025] [:error] [pid 53479:tid 53536] [client 167.71.81.114:36376] [client 167.71.81.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/about"] [unique_id "aSFFCW6cicFF3Aas-oQP5wAAAIA"]
[Sat Nov 22 13:07:21.915907 2025] [:error] [pid 53477:tid 53499] [client 167.71.81.114:36392] [client 167.71.81.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/debug/default/view"] [unique_id "aSFFCX7Lu30Ku9O40aJoIAAAABI"]
[Sat Nov 22 13:07:22.601702 2025] [:error] [pid 53479:tid 53543] [client 167.71.81.114:36408] [client 167.71.81.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/v2/_catalog"] [unique_id "aSFFCm6cicFF3Aas-oQP6AAAAIc"]
[Sat Nov 22 13:07:23.225753 2025] [:error] [pid 25856:tid 25858] [client 167.71.81.114:36416] [client 167.71.81.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aSFFCxsTP0wy94zKUvFewwAAAQA"]
[Sat Nov 22 13:07:23.848798 2025] [:error] [pid 53479:tid 53559] [client 167.71.81.114:36418] [client 167.71.81.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/server-status"] [unique_id "aSFFC26cicFF3Aas-oQP6gAAAJc"]
[Sat Nov 22 13:07:24.469085 2025] [:error] [pid 53478:tid 53522] [client 167.71.81.114:36422] [client 167.71.81.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/login.action"] [unique_id "aSFFDAhUYdXBbQswAdSj_wAAAE0"]
[Sat Nov 22 13:07:25.092189 2025] [:error] [pid 25856:tid 25867] [client 167.71.81.114:36424] [client 167.71.81.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/_all_dbs"] [unique_id "aSFFDRsTP0wy94zKUvFexgAAAQk"]
[Sat Nov 22 13:07:25.714529 2025] [:error] [pid 25856:tid 25866] [client 167.71.81.114:36434] [client 167.71.81.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/.DS_Store"] [unique_id "aSFFDRsTP0wy94zKUvFeygAAAQg"]
[Sat Nov 22 13:07:26.334310 2025] [:error] [pid 53479:tid 53557] [client 167.71.81.114:36436] [client 167.71.81.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mobi-mixx.com"] [uri "/.env"] [unique_id "aSFFDm6cicFF3Aas-oQP7gAAAJU"]
[Sat Nov 22 13:07:26.957229 2025] [:error] [pid 53478:tid 53512] [client 167.71.81.114:36448] [client 167.71.81.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mobi-mixx.com"] [uri "/.git/config"] [unique_id "aSFFDghUYdXBbQswAdSkAwAAAEM"]
[Sat Nov 22 13:07:27.579826 2025] [:error] [pid 25856:tid 25876] [client 167.71.81.114:36460] [client 167.71.81.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aSFFDxsTP0wy94zKUvFezwAAARI"]
[Sat Nov 22 13:07:28.201292 2025] [:error] [pid 9547:tid 9570] [client 167.71.81.114:36470] [client 167.71.81.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/config.json"] [unique_id "aSFFENClOR5qk7DoMeFELAAAAVE"]
[Sat Nov 22 13:07:28.823391 2025] [:error] [pid 9547:tid 9572] [client 167.71.81.114:42580] [client 167.71.81.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/telescope/requests"] [unique_id "aSFFENClOR5qk7DoMeFELQAAAVM"]
[Sat Nov 22 13:07:29.446711 2025] [:error] [pid 53478:tid 53515] [client 167.71.81.114:42586] [client 167.71.81.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/info.php"] [unique_id "aSFFEQhUYdXBbQswAdSkBgAAAEY"]
[Sat Nov 22 13:07:30.068237 2025] [:error] [pid 25856:tid 25867] [client 167.71.81.114:42598] [client 167.71.81.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/"] [unique_id "aSFFEhsTP0wy94zKUvFe0wAAAQk"]
[Mon Nov 24 12:42:33.938763 2025] [:error] [pid 49900:tid 49914] [client 167.172.158.128:36650] [client 167.172.158.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/v2/api-docs"] [unique_id "aSPiOTCyPLrvg06aornSKAAAAAw"]
[Mon Nov 24 12:42:34.588215 2025] [:error] [pid 16549:tid 16563] [client 167.172.158.128:36654] [client 167.172.158.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/v3/api-docs"] [unique_id "aSPiOqeWW19A99PUw_cSaQAAAUs"]
[Mon Nov 24 12:42:35.279880 2025] [:error] [pid 49900:tid 49926] [client 167.172.158.128:36668] [client 167.172.158.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/api-docs/swagger.json"] [unique_id "aSPiOzCyPLrvg06aornSLAAAABg"]
[Mon Nov 24 12:42:36.028161 2025] [:error] [pid 48600:tid 48636] [client 167.172.158.128:36684] [client 167.172.158.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/api/swagger.json"] [unique_id "aSPiPPtOzSUAQvWVjBdVAAAAAcY"]
[Mon Nov 24 12:42:36.670794 2025] [:error] [pid 48688:tid 48712] [client 167.172.158.128:36698] [client 167.172.158.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/@vite/env"] [unique_id "aSPiPBm2q1FkzLam7A1ujwAAAlQ"]
[Mon Nov 24 12:42:37.295763 2025] [:error] [pid 16593:tid 16610] [client 167.172.158.128:36704] [client 167.172.158.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/actuator/env"] [unique_id "aSPiPRVGznHBJI2LKpQWDAAAAo8"]
[Mon Nov 24 12:42:37.918682 2025] [:error] [pid 9630:tid 9653] [client 167.172.158.128:36706] [client 167.172.158.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/server"] [unique_id "aSPiPSrSgUgPGkizt2qngwAAAFU"]
[Mon Nov 24 12:42:38.541980 2025] [:error] [pid 48601:tid 48666] [client 167.172.158.128:36708] [client 167.172.158.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/.vscode/sftp.json"] [unique_id "aSPiPoMM4MaVTk74-AZ-AgAAAgk"]
[Mon Nov 24 12:42:39.185626 2025] [:error] [pid 9630:tid 9636] [client 167.172.158.128:36710] [client 167.172.158.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/about"] [unique_id "aSPiPyrSgUgPGkizt2qnhAAAAEQ"]
[Mon Nov 24 12:42:39.806848 2025] [:error] [pid 48601:tid 48668] [client 167.172.158.128:36726] [client 167.172.158.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/debug/default/view"] [unique_id "aSPiP4MM4MaVTk74-AZ-AwAAAgs"]
[Mon Nov 24 12:42:40.428754 2025] [:error] [pid 16441:tid 16463] [client 167.172.158.128:36734] [client 167.172.158.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/v2/_catalog"] [unique_id "aSPiQIq_bc5MOa9HflnV7QAAAJM"]
[Mon Nov 24 12:42:41.049515 2025] [:error] [pid 48600:tid 48644] [client 167.172.158.128:36748] [client 167.172.158.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aSPiQftOzSUAQvWVjBdVAgAAAc4"]
[Mon Nov 24 12:42:41.671625 2025] [:error] [pid 48601:tid 48673] [client 167.172.158.128:43420] [client 167.172.158.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/server-status"] [unique_id "aSPiQYMM4MaVTk74-AZ-BAAAAhA"]
[Mon Nov 24 12:42:42.293191 2025] [:error] [pid 16441:tid 16457] [client 167.172.158.128:43424] [client 167.172.158.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/login.action"] [unique_id "aSPiQoq_bc5MOa9HflnV8gAAAI0"]
[Mon Nov 24 12:42:42.915086 2025] [:error] [pid 16441:tid 16467] [client 167.172.158.128:43436] [client 167.172.158.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/_all_dbs"] [unique_id "aSPiQoq_bc5MOa9HflnV8wAAAJc"]
[Mon Nov 24 12:42:43.537001 2025] [:error] [pid 48601:tid 48667] [client 167.172.158.128:43440] [client 167.172.158.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/.DS_Store"] [unique_id "aSPiQ4MM4MaVTk74-AZ-BgAAAgo"]
[Mon Nov 24 12:42:44.157487 2025] [:error] [pid 48601:tid 48663] [client 167.172.158.128:43446] [client 167.172.158.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mobi-mixx.com"] [uri "/.env"] [unique_id "aSPiRIMM4MaVTk74-AZ-CAAAAgY"]
[Mon Nov 24 12:42:44.778814 2025] [:error] [pid 48601:tid 48659] [client 167.172.158.128:43456] [client 167.172.158.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mobi-mixx.com"] [uri "/.git/config"] [unique_id "aSPiRIMM4MaVTk74-AZ-CQAAAgI"]
[Mon Nov 24 12:42:45.400187 2025] [:error] [pid 16516:tid 16535] [client 167.172.158.128:43462] [client 167.172.158.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aSPiRfqZbniwaNwL8Xm_gAAAARA"]
[Mon Nov 24 12:42:46.020970 2025] [:error] [pid 9630:tid 9654] [client 167.172.158.128:43478] [client 167.172.158.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/config.json"] [unique_id "aSPiRirSgUgPGkizt2qnigAAAFY"]
[Mon Nov 24 12:42:46.644021 2025] [:error] [pid 16516:tid 16541] [client 167.172.158.128:43480] [client 167.172.158.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/telescope/requests"] [unique_id "aSPiRvqZbniwaNwL8Xm_hAAAARY"]
[Mon Nov 24 12:42:47.265495 2025] [:error] [pid 48688:tid 48713] [client 167.172.158.128:43490] [client 167.172.158.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/info.php"] [unique_id "aSPiRxm2q1FkzLam7A1ukgAAAlU"]
[Mon Nov 24 12:42:47.890022 2025] [:error] [pid 16593:tid 16601] [client 167.172.158.128:43496] [client 167.172.158.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/"] [unique_id "aSPiRxVGznHBJI2LKpQWDwAAAoY"]
[Wed Nov 26 14:05:42.037281 2025] [:error] [pid 34744:tid 34804] [client 64.225.75.246:36266] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/v2/api-docs"] [unique_id "aSaYtktgOvVbhyALkTQFmAAAAYE"]
[Wed Nov 26 14:05:42.835008 2025] [:error] [pid 34744:tid 34806] [client 64.225.75.246:36280] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/v3/api-docs"] [unique_id "aSaYtktgOvVbhyALkTQFnQAAAYM"]
[Wed Nov 26 14:05:43.714150 2025] [:error] [pid 34744:tid 34809] [client 64.225.75.246:36286] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/api-docs/swagger.json"] [unique_id "aSaYt0tgOvVbhyALkTQFnwAAAYY"]
[Wed Nov 26 14:05:44.466593 2025] [:error] [pid 10383:tid 10398] [client 64.225.75.246:36296] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/api/swagger.json"] [unique_id "aSaYuK0RJ-zjhOVjD8_XfwAAAcw"]
[Wed Nov 26 14:05:45.359086 2025] [:error] [pid 34742:tid 34760] [client 64.225.75.246:36304] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/@vite/env"] [unique_id "aSaYuZSuLNwpQF_jzAdFVQAAAEw"]
[Wed Nov 26 14:05:46.089949 2025] [:error] [pid 10383:tid 10399] [client 64.225.75.246:36318] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/actuator/env"] [unique_id "aSaYuq0RJ-zjhOVjD8_XgQAAAc0"]
[Wed Nov 26 14:05:47.062308 2025] [:error] [pid 34742:tid 34756] [client 64.225.75.246:51640] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/server"] [unique_id "aSaYu5SuLNwpQF_jzAdFVgAAAEg"]
[Wed Nov 26 14:05:47.789834 2025] [:error] [pid 34744:tid 34820] [client 64.225.75.246:51654] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/.vscode/sftp.json"] [unique_id "aSaYu0tgOvVbhyALkTQFpAAAAZE"]
[Wed Nov 26 14:05:48.585667 2025] [:error] [pid 34744:tid 34816] [client 64.225.75.246:51664] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/about"] [unique_id "aSaYvEtgOvVbhyALkTQFpwAAAY0"]
[Wed Nov 26 14:05:49.415918 2025] [:error] [pid 34743:tid 34776] [client 64.225.75.246:51680] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/debug/default/view"] [unique_id "aSaYvQvyX7Q5oU7_mBye4AAAAUA"]
[Wed Nov 26 14:05:50.146224 2025] [:error] [pid 34743:tid 34788] [client 64.225.75.246:51690] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/v2/_catalog"] [unique_id "aSaYvgvyX7Q5oU7_mBye4QAAAUw"]
[Wed Nov 26 14:05:50.874886 2025] [:error] [pid 34744:tid 34813] [client 64.225.75.246:51704] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aSaYvktgOvVbhyALkTQFrgAAAYo"]
[Wed Nov 26 14:05:51.617849 2025] [:error] [pid 34744:tid 34819] [client 64.225.75.246:51712] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/server-status"] [unique_id "aSaYv0tgOvVbhyALkTQFsQAAAZA"]
[Wed Nov 26 14:05:52.346052 2025] [:error] [pid 34744:tid 34820] [client 64.225.75.246:51726] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/login.action"] [unique_id "aSaYwEtgOvVbhyALkTQFtQAAAZE"]
[Wed Nov 26 14:05:53.107484 2025] [:error] [pid 34830:tid 34851] [client 64.225.75.246:51732] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/_all_dbs"] [unique_id "aSaYwUukvkWgWN6jCR2rEQAAABM"]
[Wed Nov 26 14:05:53.832327 2025] [:error] [pid 34743:tid 34797] [client 64.225.75.246:51742] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/.DS_Store"] [unique_id "aSaYwQvyX7Q5oU7_mBye4wAAAVU"]
[Wed Nov 26 14:05:54.559116 2025] [:error] [pid 34744:tid 34814] [client 64.225.75.246:51752] [client 64.225.75.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mobi-mixx.com"] [uri "/.env"] [unique_id "aSaYwktgOvVbhyALkTQFuwAAAYs"]
[Wed Nov 26 14:05:55.281724 2025] [:error] [pid 34743:tid 34795] [client 64.225.75.246:51764] [client 64.225.75.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mobi-mixx.com"] [uri "/.git/config"] [unique_id "aSaYwwvyX7Q5oU7_mBye5AAAAVM"]
[Wed Nov 26 14:05:56.009506 2025] [:error] [pid 34744:tid 34821] [client 64.225.75.246:51776] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aSaYxEtgOvVbhyALkTQFvwAAAZI"]
[Wed Nov 26 14:05:56.739396 2025] [:error] [pid 10383:tid 10392] [client 64.225.75.246:51784] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/config.json"] [unique_id "aSaYxK0RJ-zjhOVjD8_XggAAAcY"]
[Wed Nov 26 14:05:57.459601 2025] [:error] [pid 34743:tid 34796] [client 64.225.75.246:60140] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/telescope/requests"] [unique_id "aSaYxQvyX7Q5oU7_mBye5QAAAVQ"]
[Wed Nov 26 14:05:58.192158 2025] [:error] [pid 10383:tid 10406] [client 64.225.75.246:60146] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/info.php"] [unique_id "aSaYxq0RJ-zjhOVjD8_XhgAAAdQ"]
[Wed Nov 26 14:05:58.918981 2025] [:error] [pid 34744:tid 34814] [client 64.225.75.246:60158] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "mobi-mixx.com"] [uri "/"] [unique_id "aSaYxktgOvVbhyALkTQFwwAAAYs"]
[Wed Nov 26 14:18:57.725337 2025] [:error] [pid 34744:tid 34813] [client 159.89.174.87:60828] [client 159.89.174.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/v2/api-docs"] [unique_id "aSab0UtgOvVbhyALkTQLHAAAAYo"]
[Wed Nov 26 14:18:58.139200 2025] [:error] [pid 34830:tid 34832] [client 159.89.174.87:40810] [client 159.89.174.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/v3/api-docs"] [unique_id "aSab0kukvkWgWN6jCR2t6AAAAAA"]
[Wed Nov 26 14:18:58.536298 2025] [:error] [pid 34742:tid 34759] [client 159.89.174.87:40826] [client 159.89.174.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/api-docs/swagger.json"] [unique_id "aSab0pSuLNwpQF_jzAdIMAAAAEs"]
[Wed Nov 26 14:18:58.974438 2025] [:error] [pid 45901:tid 45925] [client 159.89.174.87:40840] [client 159.89.174.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/api/swagger.json"] [unique_id "aSab0iunQ1SpfPRNrtyxdwAAARY"]
[Wed Nov 26 14:18:59.372902 2025] [:error] [pid 34830:tid 34842] [client 159.89.174.87:40856] [client 159.89.174.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/@vite/env"] [unique_id "aSab00ukvkWgWN6jCR2t6QAAAAo"]
[Wed Nov 26 14:18:59.799049 2025] [:error] [pid 34744:tid 34827] [client 159.89.174.87:40858] [client 159.89.174.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/actuator/env"] [unique_id "aSab00tgOvVbhyALkTQLIQAAAZg"]
[Wed Nov 26 14:19:00.211880 2025] [:error] [pid 45836:tid 45850] [client 159.89.174.87:40866] [client 159.89.174.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/server"] [unique_id "aSab1JfrnOGqL-seZAxGsgAAAMQ"]
[Wed Nov 26 14:19:00.612074 2025] [:error] [pid 35540:tid 35553] [client 159.89.174.87:40868] [client 159.89.174.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/.vscode/sftp.json"] [unique_id "aSab1MGrIq2A6SZSnkKEawAAAIc"]
[Wed Nov 26 14:19:01.080278 2025] [:error] [pid 34742:tid 34770] [client 159.89.174.87:40874] [client 159.89.174.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/about"] [unique_id "aSab1ZSuLNwpQF_jzAdINwAAAFY"]
[Wed Nov 26 14:19:01.520757 2025] [:error] [pid 35540:tid 35557] [client 159.89.174.87:40878] [client 159.89.174.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/debug/default/view"] [unique_id "aSab1cGrIq2A6SZSnkKEbAAAAIs"]
[Wed Nov 26 14:19:01.959796 2025] [:error] [pid 10383:tid 10391] [client 159.89.174.87:40886] [client 159.89.174.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/v2/_catalog"] [unique_id "aSab1a0RJ-zjhOVjD8_blAAAAcU"]
[Wed Nov 26 14:19:02.402622 2025] [:error] [pid 10383:tid 10409] [client 159.89.174.87:40900] [client 159.89.174.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aSab1q0RJ-zjhOVjD8_blwAAAdc"]
[Wed Nov 26 14:19:02.883328 2025] [:error] [pid 10383:tid 10403] [client 159.89.174.87:40908] [client 159.89.174.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/server-status"] [unique_id "aSab1q0RJ-zjhOVjD8_bmQAAAdE"]
[Wed Nov 26 14:19:03.335929 2025] [:error] [pid 34830:tid 34838] [client 159.89.174.87:40910] [client 159.89.174.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/login.action"] [unique_id "aSab10ukvkWgWN6jCR2t6wAAAAY"]
[Wed Nov 26 14:19:03.762262 2025] [:error] [pid 34830:tid 34855] [client 159.89.174.87:40924] [client 159.89.174.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/_all_dbs"] [unique_id "aSab10ukvkWgWN6jCR2t7AAAABc"]
[Wed Nov 26 14:19:04.218603 2025] [:error] [pid 35540:tid 35554] [client 159.89.174.87:40930] [client 159.89.174.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/.DS_Store"] [unique_id "aSab2MGrIq2A6SZSnkKEbQAAAIg"]
[Wed Nov 26 14:19:04.655762 2025] [:error] [pid 45901:tid 45926] [client 159.89.174.87:40944] [client 159.89.174.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mobi-mixx.com"] [uri "/.env"] [unique_id "aSab2CunQ1SpfPRNrtyxeQAAARc"]
[Wed Nov 26 14:19:05.080005 2025] [:error] [pid 34742:tid 34749] [client 159.89.174.87:40948] [client 159.89.174.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mobi-mixx.com"] [uri "/.git/config"] [unique_id "aSab2ZSuLNwpQF_jzAdIPwAAAEE"]
[Wed Nov 26 14:19:05.491702 2025] [:error] [pid 45901:tid 45914] [client 159.89.174.87:40958] [client 159.89.174.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aSab2SunQ1SpfPRNrtyxegAAAQs"]
[Wed Nov 26 14:19:05.889259 2025] [:error] [pid 35540:tid 35570] [client 159.89.174.87:40964] [client 159.89.174.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/config.json"] [unique_id "aSab2cGrIq2A6SZSnkKEbgAAAJg"]
[Wed Nov 26 14:19:06.357356 2025] [:error] [pid 35540:tid 35558] [client 159.89.174.87:40978] [client 159.89.174.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/telescope/requests"] [unique_id "aSab2sGrIq2A6SZSnkKEbwAAAIw"]
[Wed Nov 26 14:19:06.796013 2025] [:error] [pid 35540:tid 35550] [client 159.89.174.87:40990] [client 159.89.174.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/info.php"] [unique_id "aSab2sGrIq2A6SZSnkKEcQAAAIQ"]
[Wed Nov 26 14:19:07.248356 2025] [:error] [pid 45901:tid 45918] [client 159.89.174.87:41004] [client 159.89.174.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.mobi-mixx.com"] [uri "/"] [unique_id "aSab2yunQ1SpfPRNrtyxfAAAAQ8"]